Privacy Policy

Yen Finder keeps the information it collects to the absolute minimum so that inbound tourists visiting Japan can use it with peace of mind. This page sets out exactly which data we handle and how.

Data Controller

• Operator: nando.llc
• Representative: Naoaki Nabeya
• Contact: info@nando.llc
• Location: Japan (please contact us by email for further details)

Information We Collect

1. Information collected automatically

• Access logs (collected by our host, Vercel): IP address, User-Agent, referrer, and request timestamp. These are retained for up to 30 days for Vercel's security and traffic-analysis purposes.
• Page-view metrics (Vercel Analytics): how many times each page is viewed and from which country, aggregated anonymously. No cookies are used (cookieless approach). No personally identifying information is included.
• Web Vitals (Vercel Speed Insights): anonymous performance metrics such as page load times. No cookies are used.

2. Information stored in cookies (all strictly necessary)

| Cookie | Purpose | Retention | |--------|---------|-----------| | locale | Remembers the selected display language | 1 year | | yenfinder_submitter | Identifies the owner of a submission (so that only your own submissions can be edited) | 30 days | | yenfinder_admin | Administrator login state (never set for general users) | Session |

We do not use any advertising or tracking cookies whatsoever. The cookies above are strictly necessary for the operation of the service.

3. Information you choose to submit

• Photos of rate boards (submitted via /submit): the photo, a store ID, and an optional free-form memo.
• These are stored in Supabase Storage (a public bucket) and then processed by OCR and imported into the rate database, or rejected if OCR is not possible.
• We do not collect any personal information about the submitter (such as name, email, or persistent IP records).

What We Do Not Collect

• Personal information such as name, address, or phone number
• Financial information such as credit card or bank account details
• Persistent location data (when the map uses your current location, it is held only in memory during the browser session and is never sent to our servers)
• Third-party advertising network tracking cookies
• Biometric or sensitive data (race, religion, health, etc.)

Third-Party Services

To retrieve rate data and to deliver pages quickly, we use the following services:

• Vercel (hosting and analytics) — Privacy Policy
• Supabase (database and storage, Singapore / US regions) — Privacy Policy
• OpenStreetMap (map tiles) — Privacy Policy
• open.er-api.com (mid-market rate API)

These services process access logs only within the scope of their own terms of service, and never for advertising or personal identification.

International Data Transfers

• Data is stored on Vercel (US, EU, and Tokyo regions) and Supabase (Singapore / US regions).
• Transfers from the EU outside Japan are carried out under each provider's Data Processing Addendum (DPA), based on Standard Contractual Clauses (SCCs) or equivalent safeguards.

Your Rights (GDPR / Japan's Act on the Protection of Personal Information (APPI))

Residents of the EU and users in Japan are entitled to the following rights:

• Right to access: the right to request disclosure of the data we hold about you
• Right to rectification: the right to have inaccurate data corrected
• Right to erasure (right to be forgotten): the right to request deletion of your data
• Right to restriction of processing: the right to limit how your data is used
• Right to data portability: the right to receive your data in a machine-readable format
• Right to object: the right to object to the processing of your data
• Right to withdraw consent: the right to withdraw consent previously given for processing

To exercise these rights, please contact us at info@nando.llc. We will respond within 30 days as a rule.

Managing Cookies

• Refusing or deleting cookies: you can do so at any time from your browser settings.
• However, disabling locale or yenfinder_submitter will prevent the language switcher and submission-editing features from working.
• Because this site does not use any tracking cookies, our cookie banner is shown as a simple notice only.

Data Retention Periods

• Access logs: 30 days
• Submitted rate photos: indefinite (deleted individually upon request)
• Rate data: indefinite (used for time-series analysis)
• Cookies: as shown in the table above

Users Under 18

This service is intended for inbound tourists to Japan in general. Users under 18 should use the service only with parental consent. We do not knowingly collect data from minors.

Disclosure to Law Enforcement

When required by a lawful, legitimate request, we may disclose data to the extent necessary.

Changes to This Policy

• This policy may be updated as necessary.
• Where there are material changes, we will announce them on the service.

Contact

• Email: info@nando.llc

Last updated: 2026-05-12